Visa is a world leader in digital payments, facilitating more than 215 billion payments transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive.

When you join Visa, you join a culture of purpose and belonging – where your growth is priority, your identity is embraced, and the work you do matters. We believe that economies that include everyone everywhere, uplift everyone everywhere. Your work will have a direct impact on billions of people around the world – helping unlock financial access to enable the future of money movement.

Join Visa: A Network Working for Everyone.

Information security is an integral part of Visa's corporate culture. It is essential to maintaining our position as an industry leader in electronic payments, which is why Visa has made it a priority to create top-tier security operations and incident response teams to defend the company against evolving cyber threats. If you would like to join a company where security is truly valued, where you can work with like-minded peers who are passionate about the art & science of cyber defense, and where you can use state of the art tools for maximum impact, then we have a home for you.

The successful candidate will work with a team of incident responders at one of Visa's Cybersecurity Investigations and Insider Threat team.

Responsibilities:

• Mitigate and contain identified threats using approved methodologies when detected.

• Support Incident Response escalations by actively performing digital forensics exams on myriad technological devices (i.e. workstation, mobile devices, servers).

• Operationalize actionable reports from the Threat Intelligence team and external sources.

• Collaborate with operational support staff to ensure they are actively engaged in potential security threats and concerns.

• Provide feedback to peer teams to enhance the sensor set and improve signature fidelity.

• Contribute to projects that enhance the security posture of the enterprise.

• Identify trends, potential new technologies, and emerging threats that may influence the business.

• Provide technical advice and input for the support of integrated security systems and solutions.

• Provide investigative support to the business on sensitive cases requiring deep technical skills.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

• Bachelors degree, OR 3+ years of relevant work experience

• 2 or more years of work experience
• 2 or more years of demonstrated work experience in a Cybersecurity related field such as incident response or investigations
• Educational or practical work experience utilizing Digital Forensic tools
• Strong knowledge of operating systems (Windows & Linux), network services and applications.
• Demonstrated experience in an enterprise-level incident response team or security operations center.
• Direct experience in handling cyber security incidents and associated incident response tools.
• A solid foundational understanding of TCP/IP and networks to include firewalls, routers, and ACLs.
• Solid problem solving and analytical skills. Able to quickly digest issues encountered and recommend an appropriate solution
• Ability to convey security concepts related Cybersecurity events to both technical and non-technical audiences.
• Proven subject matter ability in relevant areas, such as incident response, intrusion analysis, malware analysis, web application security or security engineering.
• Excellent communication and presentation skills with proven skill in presenting analytical data effectively to varied audiences.
• Strong interpersonal and leadership skills to influence and build credibility as a peer.
• Strong understanding of cloud technologies and related security best practices.
• Relevant security-related certifications a plus : CISSP, GCIH, GCIA, GCED, GCFA, CySA+.

Work Hours: Varies upon the needs of the department.

Travel Requirements: This position requires travel 5-10% of the time.

Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.